Anti-Virus Software Issue Uncovered

From Square-Enix: We are currently experiencing an issue wherein certain anti-virus software packages will misidentify the "polboot.exe" file for FINAL FANTASY XI (Windows version) as a virus. The FINAL FANTASY XI shortcut function may therefore not be available under such conditions. Please login to FINAL FANTASY XI directly from the PlayOnline Viewer or use the "Create Shortcut" function in the PlayOnline Viewer Config tool to recreate the file. We apologize for the inconvenience. Registration Server Maintenance (Dec. 1) The PlayOnline registration server will be unavailable due to maintenance at the following time. During this time, users will be unable to register or unsubscribe PlayOnline accounts, review or update their member information, or review, purchase, cancel, or reactivate Content IDs. We apologize for any inconvenience. [Date & Time] Phase 1 Dec. 1, 2004 0:00 to 4:00 (PST) Phase 2 Dec. 2, 2004 0:00 to 4:00 (PST) *Maintenance completion time may be subject to change. [Affected Services] PlayOnline

Comments

Post Comment
^^
# Nov 30 2004 at 9:05 AM Rating: Default
I'm glad the PS2 version ain't on crack like the PC version. My PC version works well. One because I don't use virus stuff, because they simply don't work.. They just tell you they work. I was hacked with Nortons Version 2004 and it says files infected 10 files able to delete 0 files unable to fix 10... WTF? Why have it?
Work Around Found!!
# Nov 29 2004 at 1:31 PM Rating: Excellent
This happened to me also. First you need to exclude this file from your Antivirus software. Consult the manual for how this is done, as I cannot provide instructions for multplie antvirus packages. Next, go into your C:\Program Files\PlayOnline\SquareEnix\FINAL FANTASY XI folder and delete the patch.rst and the patch.ver files. Then open the Playonline Viewer with the pol.exe file. When you attempt to log into Final Fantasy, the game will perform an automatic file check and download and replace the polboot.exe file. I hope this saves a few people some time.
RE: Work Around Found!!
# Nov 29 2004 at 9:33 PM Rating: Decent
didn't work. i shut off my virus scan, and removed the two files. updated for half an hour to get an error the 5 times i tried. so i put back the 2 files and started up the virus scan again. oh well, thanks anyway. just a damn little crystal anyway. hehe
RE: Work Around Found!!
# Nov 29 2004 at 8:30 PM Rating: Decent
*
111 posts
Good tip. i'll remember it when I need to reinstall polboot. Unfortunately in Virusscan 8.0 and 9.0 (i have 9.0) mcafee decided to not let people exclude files. So Mcafee users need to wait till they fix the problem on their side.


(and just in case you want to know what it took to figure that out)

Please wait while we find a technician to assist you...
You have been connected to Tamara Mackay.
Tamara Mackay: Nicolette, thank you for contacting McAfee Online Support Center. How can I assist you with your McAfee software today?
Me: hi, im trying to find a way to get mcaffee to exclude a file
Me: its identifying polboot.exe from ffxi as a pws logger or trojan and its not
Tamara Mackay: Nicolette, if I understand correctly, you have a issue regarding trojan. Is this correct?
Me: no
Tamara Mackay: Could you please elaborate the issue you are facing today?
Me: its not a trojan, mcaffee just thinks it is.
Me: so i need to make mcaffee not delete it
Tamara Mackay: Nicolette, if I understand correctly, you have a issue regarding polboot.exe file because McAfee is detecting that this is a trojan infecetd file and you need to make sure that MCAfee will not delete this file. Is this correct?
Tamara Mackay: Please let me know after deleting this file you reinstalled it again and then again McAfee detected that this file contains trojan?
Me: the file is not a trojan, it is being wrongly detected as one
Me: if i reinstall to get the file back, mcafee sees it and deletes it again.
Tamara Mackay: Have you previously contacted McAfee support regarding this issue?
Me: no.
Me: there should be a way to exclude polboot.exe.
Tamara Mackay: Which McAfee programs are currently installed? If you are not sure, you can find them by doing the following.

1. Double click on My Computer
2. Double click on the Control Panel
3. Double click on Add/Remove Programs
4. Which McAfee programs do you see listed there?
Me: McAfee virus scan and mcafee security center
Me: if it helps, mcafee thinks polboot.exe is the trojan PWS-llg.dr
Me: McAfee virus scan and mcafee security center
Me: if it helps, mcafee thinks polboot.exe is the trojan PWS-llg.dr
Tamara Mackay: Using your mouse, please right click on the "M" icon located on the bottom of the screen by the clock, and go up to "VirusScan". Then select 'about' from the menu that slides out. Give me the complete information.
Me: Build 9.0.10
Me: engine version 4.3.20
Me: dat version 4.0.4410
Me: dat file created: 11/24/2004
Me: mcafee virusscan
Me: copyright 1998-2004 networks associates technology, inc.
Me: all rights reserved.
Tamara Mackay: Please let me know polboot.exe file is of which program?
Me: a game. Final Fantasy XI
Me: Online
Me: it has 2 expansions that use it as well probably
Me: rise of the zilart
Me: and chains of promathia
Tamara Mackay: Thanks for the information.
Tamara Mackay: Based on the information you have provided, I can now provide the steps that should resolve your issue. If at any time there is something you do not understand, will you please stop me and let me know?
Me: okay.
Tamara Mackay: In order to resolve the issue I suggest you to please perform the dosscan steps and if that detects trojan then you need to contact our Virus Removal support. they will help you in removing the trojan from your system.
Tamara Mackay: At this point I believe a scan of your system in DOS is required. A scan in DOS will require the chat session to be ended and can take some time to complete. I am sending you some instructions in a new window, that you'll want to print out, that will walk you through the process of scanning in DOS. A scan in DOS does not prompt for your permission before deleting any infected files. If any system files are infected and cannot be cleaned, they may be deleted or renamed. Are you ok with me sending these instructions to you now?
Me: I dont need them. I know I dont have a trojan.
Nicolette, I suggest you to perform the dosscan steps it will help you in checking .
Me: i've already checked my system
Me: I checked it before Square enix released the following, and after.
Me: Square-enix produced this game, this is from the official site
Me: From Square-Enix:
Me: We are currently experiencing an issue wherein certain anti-virus software packages will misidentify the "polboot.exe" file for FINAL FANTASY XI (Windows version) as a virus.
Me: theyre right. it is.
Tamara Mackay: Thanks for the information.
Tamara Mackay: In order to resolve the issue I suggest you to contact our Virus Removal Support.
Tamara Mackay: They will help you in resolving the issue.
Me: er.
Tamara Mackay: I am sending you link for our helpsite to remove virus that will open in a new window.
The agent is sending you to http://ts.mcafeehelp.com/default.asp?siteID=1&resolution=1024x768&rurl=&rqs= .
Tamara Mackay: Have you received the link?
Me: so basically theres no way to exclude a file from the scan in mcaffee?
Me: sure.
Me: it opens the window i used to get to you in the first place.
Me: lol 14.95 to 64.95 to pay for someone to tell me how to use a feature that should be standard. (and fairly intuitive).
Me: no, thanks, youve been a huge help.
Tamara Mackay: I would like to inform you that we cannot exclude a file from scan in VirusScan 9.
Tamara Mackay: Your welcome.


edit: double posted a bit of the conversation
edit: rated you up for the good tip. and...

Shout out to MEA! HEY CHICA! Miss you in BnB. Log on sometime.

Edited, Mon Nov 29 20:44:10 2004
RE: Work Around Found!!
# Dec 01 2004 at 6:38 PM Rating: Decent
*
85 posts
Sounds like a GM conversation if you ask me...

anyway, same thing happened to me, my Mcafee Virusscan detected this file as a trojan too, and since i read about it here about a week ago i knew it wasnt a serious problem, but anyway, thanks for the info.
More Problems
# Nov 29 2004 at 8:08 AM Rating: Decent
I'd also like to know how to get the little crystal thingy back like Nicolette wanted too. And my shortcut to FFXI doesn't work. Searches for polboot.exe file and finds it somewhere but still doesn't work. Not a big deal really but it would be cool if it worked. Any help would be hellacool.

thanks y'all

if S/E knows about it they should make some kind of patch or fix or somethin. /angry
How do you download the short?
# Nov 29 2004 at 1:31 AM Rating: Decent
Thanks for the tip on deleting the short cut, I wondered why the sound went dead, and why the game turned off whenever the anti virus started, I just hope when norton starts up again it doesn't effect the game O.o! Anyway I'm trying to find the shortcut but am having no luck, I've searched all the files in POL but have had no luck. Help! Where do I need to look?
Thank Goodness!
# Nov 28 2004 at 3:31 PM Rating: Default
Holy cow! I got this error last night and just about freaked out when MacAfee wouldn't let me in unless I pressed "Exclude". I was afraid I'd have to spend a whole day off of work uninstalling and reinstalling POL, FFXI, and CoP. Not to mention, of course, resetting all of my macros... ¬.¬

I looked up the type of virus that MacAfee labelled the file as... It thinks polboot.exe is some sort of trojan that records passwords. I was hoping to God that I didn't just mess up my computer for myself & my family (who also use it...). It's nice to know that Squeenix is aware of the problem... yet again I thought it was just me! ^^

Thanks, too for posting this-- I would've gone on uninstalling and reinstalling all three programs!

BTW(random-ness): Hi Nico! =^.^= /wave

Edited, Sun Nov 28 15:34:53 2004
Thank Goodness!
# Nov 28 2004 at 3:29 PM Rating: Decent
Sorry for the double post! T.T

Edited, Sun Nov 28 15:33:50 2004
#REDACTED, Posted: Nov 28 2004 at 12:13 PM, Rating: Sub-Default, (Expand Post) I CANT GET ON IT SAYS CHECK TELE LINE OR SETTINGS WHAT DO I DO
NVidia Drivers
# Nov 28 2004 at 4:11 AM Rating: Decent
31 posts
I'm just wondering if anyone else using a PC with an NVidia vidcard, had weird "negative" looking display of FFXI after getting the latest driver (66.93_win2kxp_english)

I had to uninstall and reinstall my previous drivers to fix it... anyone else have the same issue?
RE: NVidia Drivers
# Dec 01 2004 at 7:09 AM Rating: Decent
yep I had the same prob. with my A7N8X-del .. I just re-installed the original drivers, and it works fine now.
help
# Nov 28 2004 at 4:10 AM Rating: Decent
i tried doing the shortcut but it doesnt want to work. Instead of it coming up as a virus it says its a trojan PWS. something. So i cant play at all :S... any suggestions?
RE: help
# Nov 28 2004 at 4:42 AM Rating: Decent
*
111 posts
program files\playonline\pol.exe should still let you play even after polboot.exe is deleted.
polboot
# Nov 28 2004 at 1:43 AM Rating: Decent
*
111 posts
hmm My antivirii caught this and deleted it (polboot.exe) so I made a new shortcut to playonline and fixed it so I could play. Anyone know if I can get my little crystal shortcut thing back somehow? (or a way to make a shortcut from log on, to just play the game already? =p
RE: polboot
# Nov 28 2004 at 4:02 PM Rating: Excellent
The problem with not running from polboot is that there are OTHER settings and .dat files that are loaded with Playonline than just Playonline itself.

Without POLBOOT you're going to have a much slower refresh rate, and your graphics/sound will not be optimized.

You may notice that certain sounds will not play.

There is a whole host of reasons they want you to load from POLBOOT, check the POL website there should still be a security or a compatability bulletin about it, but it may be difficult to find as it is probably very old by now.
Thank you for the info
# Nov 28 2004 at 12:43 AM Rating: Decent
I was going to ask about this the next time I got online as it happened to me this afternoon. Thank you for clearing it up so quickly.
Post Comment

Free account required to post

You must log in or create an account to post messages.